LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24450 Commits
1 Branch
46 MiB
Tree: 4999f212a5
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '4999f212a5'
${ noResults }
openwrt-packages-dist/net/openvpn/patches/100-mbedtls-disable-runtime...

11 lines
412 B
Raw Normal View History

openvpn: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
4 years ago
​
openvpn: update to 2.5.2 Fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with "--auth-gen-token" or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Add CI build test script. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
4 years ago
openvpn: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
4 years ago
​
​
​
​
​
​
​
 
  1. --- a/src/openvpn/ssl_mbedtls.c

  2. +++ b/src/openvpn/ssl_mbedtls.c

  3. @@ -1535,7 +1535,7 @@ const char *

  4.  get_ssl_library_version(void)
  5.  {
  6.      static char mbedtls_version[30];
  7. -    unsigned int pv = mbedtls_version_get_number();

  8. +    unsigned int pv = MBEDTLS_VERSION_NUMBER;

  9.      sprintf( mbedtls_version, "mbed TLS %d.%d.%d",
  10.               (pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );
  11.      return mbedtls_version;